Revision 1.4Aug 21, 2026

Functional Update

• 1.5.1 Ensure address space layout randomization is enabled
• 3.3.1 Ensure ip forwarding is disabled
• 3.3.10 Ensure tcp syn cookies is enabled
• 3.3.11 Ensure ipv6 router advertisements are not accepted
• 3.3.2 Ensure packet redirect sending is disabled
• 3.3.3 Ensure bogus icmp responses are ignored
• 3.3.4 Ensure broadcast icmp requests are ignored
• 3.3.5 Ensure icmp redirects are not accepted
• 3.3.6 Ensure secure icmp redirects are not accepted
• 3.3.7 Ensure reverse path filtering is enabled
• 3.3.8 Ensure source routed packets are not accepted
• 3.3.9 Ensure suspicious packets are logged